3 ms·
It appears it can be configured to actively return attacks: > Portspoof can be used as an 'Exploitation Framework Frontend', that turns your system into respon
by orev 2y ago
It appears it can be configured to actively return attacks:
> Portspoof can be used as an 'Exploitation Framework Frontend', that turns your system into responsive and aggressive machine. In practice this usually means exploiting your attackers' tools and exploits
- pogue 2y agoI can't seem to figure out how this would work or what this mean. Most of the links to the documentation seem to be missing. I'd actually be curious to know if this seemingly ~10 year old software still works. Also how much bandwidth it uses, CPU/RAM etc.
- orev 2y agoI would guess that it fingerprints the scanning software (e.g. metasploit), then feeds a payload back to it that has a known exploit in the scanning script.
- pixl97 2y agoThere's tons of client software that can be exploited if you send a dangerous payload to it. Think of an exploitable version of Curl that will fail if it receives a bad http header.